# Copy to ~/.config/rein-aharness/claim-loop.env and chmod 600

# Prefer k8s:// pseudo-URLs — rein-aharness-claim resolves ClusterIP at start
# (no kubectl port-forward). See activity-core docs/llm-connect-host-access.md
ACTIVITY_CORE_URL=k8s://activity-core/actcore-api:8010
ACTIVITY_CORE_WORKER_TOKEN=
AGENT_HARNESS_WORKER_ID=rein-aharness@railiance01
AGENT_HARNESS_OPS_LABELS=automated
AGENT_HARNESS_OPS_LABELS_MODE=any
AGENT_HARNESS_OPS_LEASE_SECONDS=900
AGENT_HARNESS_CLAIM_INTERVAL=30
# Comma-separated, exact profile@version refs. Leave empty while no profiled
# production definition is enabled; non-ready profiles fail startup preflight.
AGENT_HARNESS_REQUIRED_PROFILE_REFS=
AGENT_HARNESS_LEGACY_APPROACHES_UNTIL=2026-12-31
AGENT_HARNESS_REPO_MAP={"freedom-intelligence":"/home/tegwick/freedom-intelligence","binky-control":"/home/tegwick/binky-control"}
AGENT_HARNESS_REPO_ROOTS=/home/tegwick:/home/tegwick/work
LLM_CONNECT_URL=k8s://activity-core/llm-connect:8080
STATE_HUB_URL=k8s://activity-core/actcore-statehub-edge-relay:8000
KUBECONFIG=/etc/rancher/k3s/k3s.yaml
BAO_ADDR=https://bao.coulomb.social
VAULT_ADDR=https://bao.coulomb.social
EXECUTOR_APPROLE_DIR=/home/tegwick/.local/rein-aharness/approle-binky-mail

# Monetary admission is opt-in for existing workers. A factory deployment must
# set REQUIRE=1 after owner acceptance; absent/invalid state then denies claim.
# Never mount the private policy/ledger into a workload. See docs/spend-admission.md.
# AGENT_HARNESS_REQUIRE_SPEND_ADMISSION=1
# AGENT_HARNESS_SPEND_POLICY=/absolute/private/spend-policy.json
# AGENT_HARNESS_SPEND_LEDGER=/absolute/private/spend.sqlite3
# AGENT_HARNESS_EXECUTION_PROJECT=<accepted-project>